Applicationsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Span Observer

Nov 13

Malicious package detection Dynatrace: find and triage CWE-506

#applicationsecurity #devops #dynatrace #dynatracesaas

5 min read

Ioneyrezende

Nov 13

Rote's OAuth Merge Endpoint Let One User Pull Another Identity Into Their Account

#security #identity #applicationsecurity

3 min read

StarkMan

Nov 13

Contao's Edit-Multiple Action Allowed a Filemount User to Leave the Assigned Folder

#security #identity #applicationsecurity

3 min read

kozhevniko

Nov 13

Crawl4AI Let an API Client Inject JavaScript Through Selector and Wait Fields

#security #identity #applicationsecurity

3 min read

andreagomez

Nov 13

Traccar Let an Empty Password Become a Valid LDAP Login

#security #identity #applicationsecurity

3 min read

facilishz

Nov 13

ByteStash API Keys Survived the Account Deactivation They Should Have Lost

#security #identity #applicationsecurity

2 min read

facilishz

Nov 11

Node.js Permission Checks Are a Seat Belt, Not a Container

#node #permissions #applicationsecurity #sandboxing

3 min read

StarkMan

Nov 5

Stack Auth visibility is a reminder to inventory application identity

#zoomeye #identity #applicationsecurity

2 min read

johnettagaweraks

Nov 9

Java serialization filters need an allowlist first-run process

#security #java #applicationsecurity

3 min read

Dheeraj Prakash S

Nov 4

Your Code Has Bugs You Haven't Met Yet: A Friendly Deep Dive into SAST with SonarQube

#applicationsecurity #sonarqube #python #cybersecurity

17 min read

OnaEiuspkz

Nov 3

After the DOMPurify Patch: Hardening Rich Content Rendering Against CVE-2026-65898

#cve202665898 #dompurify #applicationsecurity #splunk

4 min read

andreagomez

Oct 16

Authenticating WebSocket connections at the edge

#websocket #authentication #applicationsecurity

2 min read

kozhevniko

Oct 15

Time-of-check to time-of-use is a design problem, not a lint warning

#security #applicationsecurity

2 min read

yutianle

Oct 15

Envelope encryption only helps if the key hierarchy is real

#security #applicationsecurity

2 min read

kozhevniko

Oct 11

Race Conditions in File and State Transitions: Why a Lock on One Step Is Not a Control

#raceconditions #concurrency #applicationsecurity #toctou

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.